CISCO-LWAPP-WAPI-MIB
94 objects
cisco WiFi Controller Snmp agent support for Wapi. WAPI is a Chinese National Standard for Wireless LAN (GB 15629.11-2003) GLOSSARY: WAPI - WLAN Authentication and Privacy Infrastructures WAI - WLAN Authentication Interface WLAN - Wireless Local Area Network WPI - Wireless Privacy Interface MSK - multicast session key AKM - authentication and key management BKID - Base Key IDentification
Imported Objects
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.9.9.9997 | IdentityciscoLwappWapiMIB | cisco WiFi Controller Snmp agent support for Wapi. WAPI is a Chinese National Standard for Wireless LAN (GB 15629.11-2003) GLOSSARY: WAPI - WLAN Authentication… | ||
| 1.3.6.1.4.1.9.9.9997.1 | NodeciscoLwappWapiMIBObjects | |||
| 1.3.6.1.4.1.9.9.9997.1.1 | TablecLWapiWlanStats | not-accessible | current | This table maintains the WAPI statistics for each WLAN on which WAPI is configured as the security protocol. |
| 1.3.6.1.4.1.9.9.9997.1.1.1 | RowcLWapiWlanStatsEntry | not-accessible | current | An entry in the cLWWSW Table |
| 1.3.6.1.4.1.9.9.9997.1.1.1.1 | ColumncLWWSWAISignatureErrors | read-only | current | This counter shall increment when the signature in the received WAI message is incorrect |
| 1.3.6.1.4.1.9.9.9997.1.1.1.2 | ColumncLWWSWAIHMACErrors | read-only | current | This counter shall increment when the message authentication code in the received WAI message is incorrect |
| 1.3.6.1.4.1.9.9.9997.1.1.1.3 | ColumncLWWSWAIAuthResultFailures | read-only | current | This counter shall increment when the WAI authentication is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.1.1.4 | ColumncLWWSWAIDiscardCounters | read-only | current | This counter shall increment when the received WAI message is discarded |
| 1.3.6.1.4.1.9.9.9997.1.1.1.5 | ColumncLWWSWAITimeoutCounters | read-only | current | This counter shall increment when the WAI message is timeout |
| 1.3.6.1.4.1.9.9.9997.1.1.1.6 | ColumncLWWSWAIFormatErrors | read-only | current | This counter shall increment when there exists format error in the WAI message |
| 1.3.6.1.4.1.9.9.9997.1.1.1.7 | ColumncLWWSWAICertHandshakeFailures | read-only | current | This counter shall increment when the WAI Certificate Authentication is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.1.1.8 | ColumncLWWSWAIUnicastHandshakeFailures | read-only | current | This counter shall increment when the WAI Unicast Key Negotiation is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.1.1.9 | ColumncLWWSWAIMulticastHandshakeFailures | read-only | current | This counter shall increment when the WAI Multicast Key Negotiation is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.1.1.10 | ColumncLWWSWPIRXReplayCounters | read-only | current | This counter shall increment when the WPI RX replay check is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.1.1.11 | ColumncLWWSWPIRXMicErrorCounters | read-only | current | This counter shall increment when the WPI MIC is error |
| 1.3.6.1.4.1.9.9.9997.1.1.1.12 | ColumncLWWSWPIRXDecryptErrorCounters | read-only | current | This counter shall increment when the WPI Decryption is error |
| 1.3.6.1.4.1.9.9.9997.1.2 | TablecLWapiClientStats | not-accessible | current | This table maintains the WAPI statistics for each client connected to a WLAN on which WAPI is configured as the security protocol. |
| 1.3.6.1.4.1.9.9.9997.1.2.1 | RowcLWapiClientStatsEntry | not-accessible | current | An entry in the cLWapiClientStats Table |
| 1.3.6.1.4.1.9.9.9997.1.2.1.1 | ColumncLWCSWapiClientVersion | read-only | current | This object represents the WAPI draft version used by the WAPI client |
| 1.3.6.1.4.1.9.9.9997.1.2.1.2 | ColumncLWCSWAISignatureErrors | read-only | current | This counter shall increment when the signature in the received WAI message is incorrect |
| 1.3.6.1.4.1.9.9.9997.1.2.1.3 | ColumncLWCSWAIHMACErrors | read-only | current | This counter shall increment when the message authentication code in the received WAI message is incorrect |
| 1.3.6.1.4.1.9.9.9997.1.2.1.4 | ColumncLWCSWAIAuthResultFailures | read-only | current | This counter shall increment when the WAI authentication is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.2.1.5 | ColumncLWCSWAIDiscardCounters | read-only | current | This counter shall increment when the received WAI message is discarded |
| 1.3.6.1.4.1.9.9.9997.1.2.1.6 | ColumncLWCSWAITimeoutCounters | read-only | current | This counter shall increment when the WAI message is timeout |
| 1.3.6.1.4.1.9.9.9997.1.2.1.7 | ColumncLWCSWAIFormatErrors | read-only | current | This counter shall increment when there exists format error in the WAI message |
| 1.3.6.1.4.1.9.9.9997.1.2.1.8 | ColumncLWCSWAICertHandshakeFailures | read-only | current | This counter shall increment when the WAI Certificate Authentication is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.2.1.9 | ColumncLWCSWAIUnicastHandshakeFailures | read-only | current | This counter shall increment when the WAI Unicast Key Negotiation is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.2.1.10 | ColumncLWCSWAIMulticastHandshakeFailures | read-only | current | This counter shall increment when the WAI Multicast Key Negotiation is unsuccessful |
| 1.3.6.1.4.1.9.9.9997.1.2.1.11 | ColumncLWCSWAIUnicastCipherSuite | read-only | current | This value represents the Client Unicast Cipher Suite in use, of which obtained from Assoc req frame |
| 1.3.6.1.4.1.9.9.9997.1.2.1.12 | ColumncLWCSWAIMcastCipherSuite | read-only | current | This value represents the Client Multicast Cipher Suite in use, of which obtained from Assoc req frame |
| 1.3.6.1.4.1.9.9.9997.1.2.1.13 | ColumncLWCSWAIAuthenticationSuiteRequested | read-only | current | This object specificies the last AKM suite requested from client. 0x 00 14 72 01 : cert 0x 00 14 72 02 : psk |
| 1.3.6.1.4.1.9.9.9997.1.2.1.14 | ColumncLWCSWAIBKIDUsed | read-only | current | This value represents the selector of the last BKID used in the last Unicast Key Negotiation Handshake |
| 1.3.6.1.4.1.9.9.9997.1.2.1.15 | ColumncLWCSWAICtrPortState | read-only | current | This value represents the state of client controlled port entity, true means authenticated, false means not authenticated |
| 1.3.6.1.4.1.9.9.9997.1.3 | TablecLWapiWlanConfig | not-accessible | current | This table maintains the WAPI config entry for the WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.3.1 | RowcLWapiWlanConfigEntrty | not-accessible | current | An entry in the cLWapiWlanConfig Table |
| 1.3.6.1.4.1.9.9.9997.1.3.1.1 | ColumncLWCSWlanWapiEnable | read-write | current | This object is used to enable the WAPI security on the WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.2 | ColumncLWCSWlanWapiAkmKeyMgmtMode | read-write | current | This object is used to enable the AKM type to be used for the WAPI WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.3 | ColumncLWCSWlanWapiEncryptType | read-write | current | This object is used to enable the encryption type for WAPI WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.4 | ColumncLWCSWlanWapiPskFmt | read-write | current | This object indicates the type of the authentication preshared key configured through the object cLWCSWlanWapiPskSetkey. Note that the key configuration is app… |
| 1.3.6.1.4.1.9.9.9997.1.3.1.5 | ColumncLWCSWlanWapiPsk | read-write | current | This object is used to configure the Pre-Shared Key for WAI PSK authentication for the WLAN. The key can be in ASCII or HEX format. 'ascii' 8-40 characters 'he… |
| 1.3.6.1.4.1.9.9.9997.1.3.1.6 | ColumncLWCSWlanWapiConfigUnicasCiphersEntry | read-only | current | The selector of a supported unicast cipher suite. It consists of an OUI (the first 3 octets) and a cipher suite identifier (the last octet). |
| 1.3.6.1.4.1.9.9.9997.1.3.1.7 | ColumncLWCSWlanWapiConfigUnicastCipherSize | read-only | current | This object indicates the length in bit of the USK. This should be 256 for SMS4. The first 128bits is the UEK and the last 128bits is the UCK. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.8 | ColumncLWCSWlanWapiMcastCipherSize | read-only | current | This object indicates the length in bit of the MSK. This should be 256 for in SMS4. The first 128bits is the MEK and the last 128bits is the MCK. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.9 | ColumncLWCSWlanBKLifeTime | read-write | current | This object is used to configure the maximum lifetime of a BK in the BK cache. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.10 | ColumncLWCSWlanBKReauthThreshold | read-write | current | This object is used to configure the percentage of the BK lifetime that should expire before a WAI reauthentication occurs. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.11 | ColumncLWCSWlanWapiConfigMulticastCipher | read-write | current | This object indicates the multicast cipher suite that this entity must adopt. The WAPI Parameter Set information element shall adopt the value of this variable… |
| 1.3.6.1.4.1.9.9.9997.1.3.1.12 | ColumncLWCSWlanWapiAuthenticationSuiteSelected | read-only | current | This object represents the selector of the last AKM suite negotiated. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.13 | ColumncLWCSWlanWapiUnicastCipherSelected | read-only | current | This object indicates the selector of the last unicast cipher suite negotiated. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.14 | ColumncLWCSWlanWapiMulticastCipherSelected | read-only | current | This object indicates the selector of the last multicast cipher suite negotiated. |
| 1.3.6.1.4.1.9.9.9997.1.3.1.15 | ColumncLWCSWlanWapiPreauthenticationState | read-only | current | This object represents the state of Preauthentication in WAPI and currently it is not supported. |
| 1.3.6.1.4.1.9.9.9997.1.4 | TablecLWapiAPTable | not-accessible | current | This table maintains the WAPI details and configurations for each AP connected. |
| 1.3.6.1.4.1.9.9.9997.1.4.1 | RowcLWapiAPEntry | not-accessible | current | An entry in the cLWapiAPTable Table. |
| 1.3.6.1.4.1.9.9.9997.1.4.1.1 | ColumncLWCSWapiAPMaxUnicastKeysSupport | read-only | current | This object represents the maximum number of USK's that an AP can support. |
| 1.3.6.1.4.1.9.9.9997.1.5 | TablecLWapiWlanAKMSuitesConfigTable | not-accessible | current | This table maintains the WAPI config entry for the WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.5.1 | RowcLWapiWlanAKMSuitesConfigEntry | not-accessible | current | An entry in the cLWapiWlanAKMSuitesConfig Table |
| 1.3.6.1.4.1.9.9.9997.1.5.1.1 | ColumncLWCSWlanWapiAuthenticationSuiteIndex | not-accessible | current | This object is used to a index for AKM suites on the WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.5.1.2 | ColumncLWCSWlanWapiAuthenticationSuite | read-only | current | This object is used to indicate the AKM suite octects on the WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.5.1.3 | ColumncLWCSWlanWapiAuthenticationSuiteEnable | read-write | current | This object is used to enable the AKM suites on the WLAN. |
| 1.3.6.1.4.1.9.9.9997.1.6 | TablecLWapiCiphers | not-accessible | current | This table maintains the unicast cipher suites supported by this entity. It allows enabling and disabling of each unicast cipher suite by network management. T… |
| 1.3.6.1.4.1.9.9.9997.1.6.1 | RowcLWapiCiphersEntry | not-accessible | current | An entry in the cLWapiCiphers Table. |
| 1.3.6.1.4.1.9.9.9997.1.6.1.1 | ColumncLWCSWlanCipherIndex | not-accessible | current | This object represents auxiliary index of the CiscoWapiCiphersEntry. |
| 1.3.6.1.4.1.9.9.9997.1.6.1.2 | ColumncLWCSWlanCipherEnabled | read-write | current | This object represents enables or disables the unicast cipher. |
| 1.3.6.1.4.1.9.9.9997.2 | NodeciscoLwappWapiConfig | |||
| 1.3.6.1.4.1.9.9.9997.2.1 | ScalarclWapiASIpAddress | read-write | current | This object represents the IP address of the WAPI authentication server. |
| 1.3.6.1.4.1.9.9.9997.2.2 | ScalarclWapiASPortNumber | read-write | current | This object represents the UDP port number for WAPI authentication server. |
| 1.3.6.1.4.1.9.9.9997.2.3 | ScalarclWapiASRequestTimeout | read-write | current | This object represents timeout value for the packets sent to Auth Server. |
| 1.3.6.1.4.1.9.9.9997.2.4 | ScalarclWapiMulticastRekeyMethod | read-write | current | This object selects a mechanism for rekeying the WAPI MSK. The default is time-based, once per day. Rekeying the MSK is only applicable to an entry acting in t… |
| 1.3.6.1.4.1.9.9.9997.2.5 | ScalarclWapiMulticastRekeyTime | read-write | current | This object represents the time in seconds after which the WAPI MSK will be refreshed. The timer will start the moment the MSK was set using the MLME-SETWPIKEY… |
| 1.3.6.1.4.1.9.9.9997.2.6 | ScalarclWapiMulticastRekeyMessages | read-write | current | This object represents the message count in thousands after which the WAPI MSK will be refreshed. The message counter will start the moment the MSK was set usi… |
| 1.3.6.1.4.1.9.9.9997.2.7 | ScalarclWapiMulticastRekeyStrict | read-write | current | This object signals that the MSK shall be refreshed whenever a STA leaves the BSS that possesses the MSK. |
| 1.3.6.1.4.1.9.9.9997.2.8 | ScalarclWapiConfigCertificateUpdateCount | read-write | current | This object represents the number of times messages in the WAPI hhandshake protocol will be retried per certificate handshake attempt. |
| 1.3.6.1.4.1.9.9.9997.2.9 | ScalarclWapiConfigMulticastUpdateCount | read-write | current | This object represents the number of times message 1 in the WAPI muticast key announcement handshake will be retried per MSK handshake attempt. |
| 1.3.6.1.4.1.9.9.9997.2.10 | ScalarclWapiConfigUnicastUpdateCount | read-write | current | This object represents the number of times message 1 and message 3 in the WAPI unicast key announcement handshake will be retried per USK handshake attempt. |
| 1.3.6.1.4.1.9.9.9997.2.11 | ScalarcLWCSWapiConfigureVersion | read-only | current | This object represents the WAPI configuration version |
| 1.3.6.1.4.1.9.9.9997.2.12 | ScalarclWapiConfigControlledPortControl | read-only | current | This object indicates the value of the Controlled port. If the value is 0 which means automatic, the current behaviour. The state of the controlled port shall … |
| 1.3.6.1.4.1.9.9.9997.2.13 | ScalarclWapiUserInvalidCertificationInbreakNetwork | read-only | current | This object represents the WAPI user with invalid certification. |
| 1.3.6.1.4.1.9.9.9997.2.14 | ScalarcLApWAPISecurityLowAttack | read-only | current | This object represents the WAPI security low attack notification information. |
| 1.3.6.1.4.1.9.9.9997.2.15 | ScalarclWapiUnicastRekeyMethod | read-write | current | This object selects a mechanism for rekeying the WAPI USK. The default is time-based, once per day. Rekeying the USK is only applicable to an entry acting in t… |
| 1.3.6.1.4.1.9.9.9997.2.16 | ScalarclWapiUnicastRekeyTime | read-write | current | This object represents the time in seconds after which the WAPI USK will be refreshed. The timer will start the moment the USK was set using the MLME-SETWPIKEY… |
| 1.3.6.1.4.1.9.9.9997.2.17 | ScalarclWapiUnicastRekeyMessage | read-write | current | This object represents the message count in thousands after which the WAPI USK will be refreshed. The message counter will start the moment the USK was set usi… |
| 1.3.6.1.4.1.9.9.9997.2.18 | ScalarclWapiConfigSATimeout | read-write | current | This object represents the maximum time a security association shall take to set up. |
| 1.3.6.1.4.1.9.9.9997.2.19 | ScalarcLApWAPIReplayAttack | read-only | current | This object represents the WAPI replay attack notification information. |
| 1.3.6.1.4.1.9.9.9997.2.20 | ScalarcLApWAPITamperAttack | read-only | current | This object represents the WAPI tamper attack notification information. |
| 1.3.6.1.4.1.9.9.9997.2.21 | ScalarclWapiAddressRedirectAttack | read-only | current | This object represents the WAPI redirect attack notification information. |
| 1.3.6.1.4.1.9.9.9997.3 | NodeciscoLwappWapiCertificateObjects | |||
| 1.3.6.1.4.1.9.9.9997.3.1 | ScalarclWapiWLCCertificateStatus | read-only | current | This object represents the installation state of WLC Certificate. True means the WLC certificate is installed. False means it is uninstalled. |
| 1.3.6.1.4.1.9.9.9997.3.2 | ScalarclWapiCACertificateStatus | read-only | current | This object represents the installation state of Certificate Authority Certificate. True means the CA certificate is installed. False means it is uninstalled |
| 1.3.6.1.4.1.9.9.9997.3.3 | ScalarclWapiASCertificateStatus | read-only | current | This object represents the installation state of Auth Server Certificate. True means the AS certificate is installed. False means it is uninstalled. |
| 1.3.6.1.4.1.9.9.9997.4 | NodeciscoLwappWapiMIBNotifObjects | |||
| 1.3.6.1.4.1.9.9.9997.4.1 | NotificationciscoLwappWapiUserInvalidCertificateNetworkTrap | current | This notification will be sent when the WAPI Client is installed with invalid certificates. | |
| 1.3.6.1.4.1.9.9.9997.4.2 | NotificationciscoLwappWapiSecurityLowAttackTrap | current | This notification will be sent when AP received a fake Unicast Key Negotiation Response frame of which the WIE_AUSE is different with that of AP sent before. | |
| 1.3.6.1.4.1.9.9.9997.4.3 | NotificationciscoLwappWapiReplayAttackTrap | current | This notification will be sent when AP received an AE challenge is different with that of AP received before. | |
| 1.3.6.1.4.1.9.9.9997.4.4 | NotificationciscoLwappWapiTamperAttackTrap | current | This notification will be sent when AP received an invaild Message Authentication Code. | |
| 1.3.6.1.4.1.9.9.9997.4.5 | NotificationciscoLwappWapiAddressRedirectAttackTrap | current | This notification will be sent when AP received an address redirect attack trap. Radio interface information (MAC), BSSID, SSID, Mac of station |